Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICqGJpCWenOdNNMFoE6GmQSEYCc.roa
File: ICqGJpCWenOdNNMFoE6GmQSEYCc.roa (raw, json)
Hash identifier: BIDQah+bfVdByE3MBgxULyukvL/iRGu1Nn3ui/6r/4A=
Subject key identifier: 20:2A:86:26:90:96:7A:73:9D:34:D3:05:A0:4E:86:99:04:84:60:27
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196A1B1E081672833B265F46A7850933CD7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICqGJpCWenOdNNMFoE6GmQSEYCc.roa
Signing time: Mon 05 May 2025 18:25:11 +0000
ROA not before: Mon 05 May 2025 18:25:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
109.176.252.0/24 maxlen: 24
194.105.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:b1:e0:81:67:28:33:b2:65:f4:6a:78:50:93:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:25:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202a862690967a739d34d305a04e869904846027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:e5:5e:a7:89:a5:86:a7:92:c2:2d:cf:d1:
7a:6b:84:89:2b:98:36:da:0c:d5:9b:c5:13:c5:60:
94:8e:03:06:ad:7f:aa:8f:ed:ae:16:4c:73:72:45:
64:40:4b:45:a8:ca:9e:bf:11:c2:30:b7:fc:0a:e0:
5d:d1:c0:49:ef:06:2c:a8:91:4f:ac:fd:da:92:5b:
9f:29:63:6b:b9:cf:20:24:f9:3f:3e:e5:21:b9:fd:
22:4e:a9:d6:85:35:bf:f4:3d:46:07:fa:85:73:6d:
a4:ab:af:cf:c7:0b:05:e8:7e:01:78:10:d4:10:1d:
bf:e9:af:e0:a8:df:f5:36:81:7c:b9:f3:15:ec:ce:
b4:97:29:1f:38:74:95:7a:a6:e7:13:8c:45:51:1f:
a7:9d:d8:51:91:99:d4:21:cf:e4:a7:b8:21:8c:f3:
dd:23:7c:a8:35:9c:63:a0:c6:28:1d:a0:3b:69:32:
19:18:96:cb:ef:2b:03:5a:11:35:23:f1:f2:71:34:
25:1f:48:18:fd:d2:58:2a:0c:e4:cc:66:b4:66:4e:
d6:dd:9f:d8:ca:23:ca:dc:71:23:01:03:2d:ad:bc:
db:b2:3a:6a:b7:11:ce:aa:0f:a2:04:b9:3e:fb:0f:
8c:34:2e:43:10:2d:74:0e:6b:5c:56:99:60:8a:fd:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:86:26:90:96:7A:73:9D:34:D3:05:A0:4E:86:99:04:84:60:27
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ICqGJpCWenOdNNMFoE6GmQSEYCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.152.55.0/24
82.163.0.0/24
82.163.10.0/23
89.213.226.0/24
109.176.30.0/24
109.176.208.0/24
109.176.252.0/24
194.105.76.0/22
Signature Algorithm: sha256WithRSAEncryption
39:d3:3c:2d:cf:5b:5a:79:72:42:c7:e7:a7:0c:23:b5:1a:7e:
4b:73:4c:9d:2b:d6:b3:71:c8:2f:18:e3:83:be:0f:ab:0b:da:
fb:3f:95:d3:41:92:eb:46:89:a6:9e:d3:72:e8:89:21:fc:79:
5f:ca:4f:20:38:b0:54:c6:47:8b:01:47:ca:07:27:3f:07:a9:
d7:a1:cc:db:98:a2:1f:54:d9:ba:bf:65:25:9c:95:eb:80:d5:
fc:d0:8d:be:b6:ed:ae:3a:1e:b2:01:91:c9:fe:3f:cb:0d:19:
fe:0e:ee:7d:fb:2c:7b:a1:b4:d8:3d:6e:5f:25:e0:17:a1:f5:
cc:37:f5:81:91:7b:bd:f4:f1:8c:91:2c:cc:3b:f6:41:59:9e:
e6:72:4c:5d:d1:9a:66:dc:07:05:44:84:66:42:00:a5:c0:74:
67:4f:25:8b:63:23:33:bf:03:6d:0a:a4:3c:b6:22:b0:43:42:
e4:88:97:14:20:e0:6e:98:9f:23:cb:77:f4:a0:03:5d:c4:45:
2a:80:2e:fd:fa:32:45:73:47:4c:df:2f:4c:39:5d:cf:ad:6e:
3f:fc:79:ab:25:62:74:68:2c:c8:29:84:94:3b:52:ce:48:4b:
6b:7c:96:65:d5:e4:6c:ab:be:5f:cd:e1:92:70:cc:51:77:63:
38:35:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:27:52 2025 by rpki-client